Creating an IDS

we think to buy " Network Intrusion Detection, 3rd edition"

In addition fot studying tcp/ip:
Internetworking tcp /ip

The TCP/IP Illustrated series (there are 3 volumes) is considered by many as the de facto standard "Bible" of TCP/IP.

As a new tcp/ip apprentice this book seems difficult.... very difficult.... :)

Quote:

---

Originally posted here by JJX
As a new tcp/ip apprentice this book seems difficult.... very difficult.... :)

---

TCP/IP on an IDS level isn't easy ;) But the books are very, very complete. I mostly use them as reference material. I still need to lookup stuff every now and then (even after 8 years). Especially rarely used options/flags. I'll bet you can find the basic TCP/IP stuff on the Internet. Use the Illustrated as reference and to get down to the nitty gritty bits and bytes.

zencoder set's mode +dumbass

Quote:

---

Originally posted here by zencoder
Decent tutorial on building a Fedora Core 3 system, installing MySQL, Snort, BASE, et. al. to build a solid IDS. His site looks like ****, but the PDF has some good info for the begginer to build an IDS, so it's worth a look.

---

zencoder set's mode -dumbass

http://www.internetsecurityguru.com/

Ok... You're at university.... So... Unless you intend to stay there for about ten years writing an IDS when you have yet to begin to research TCP/IP you have a _very_ bad idea.....

I would scale down your project if I were you.....